I know click fraud software here is pretty controversial, but we do use it. We also have tons of competitors in our space who get pretty click happy, so it’s case-by-case.
I agree it can be a bit too aggressive. Default settings for ClickCease are blocking all VPNS, only 2 visits allowed, etc. We loosened the visit limit (have seen opps come in from those who click on our ads as many as 3 times), and removed the VPN blocking. I check the IPs that have been blocked daily as QA. Those who click 3 times within 1 minute bouncing off each time? We keep those IPS blocked.